IT Security Engineer

About Us

RedCompass Labs enables good payments and helps stop the bad. We are experts in ISO20022-based payments, instant payments, cross-border payments, payments interoperability and financial crime. We use the latest Applied AI, micro-services technology and deep payment knowledge to deliver payment transformation projects. These solutions help our clients accelerate their payments modernization programs, reducing costs and regulatory risk.

The RedFlag Accelerator sets the industry standard for detecting financial crimes. Using a persona-oriented approach, it identifies the actors behind transactions—victims, money-laundering professionals, perpetrators, and more. By combining the very latest red flags, crime models, and OSINT data, our system detects crimes spanning labor and sex trafficking, elder abuse, drug trafficking, as well as scams and potential APP fraud within financial transactions. Our comprehensive offerings include algorithms, analytics, and training tools for bank's systems and team.

With offices in London, Warsaw, Antwerp, Tokyo, Miami, Toronto, and Pune, we support clients worldwide.

Role Description

We are seeking a Security and Compliance–focused IT Engineer to join our IT team. This role will be primarily responsible for strengthening and maintaining the organization's security posture and compliance controls across Microsoft and cloud environments. The ideal candidate will have hands-on experience with Microsoft 365, Azure, Intune, and security tools, alongside strong technical foundations in endpoint management and identity administration.

This position requires both strategic thinking and technical execution — ensuring the confidentiality, integrity, and availability of systems while enabling efficient, secure IT operations.

Key Responsibilities

Security & Compliance (Core Focus) :

• Lead the implementation, monitoring, and continuous improvement of Microsoft security and compliance frameworks across the enterprise environment.
• Administer Microsoft Intune compliance policies to enforce device encryption, health checks, and endpoint protection standards.
• Manage Microsoft Purview for data governance, data loss prevention (DLP), sensitivity labels, and eDiscovery.
• Administer and optimize Microsoft Defender for Endpoint and Defender for Cloud , ensuring proactive threat detection, vulnerability remediation, and policy compliance.
• Regularly review and adjust Microsoft Entra ID (Azure AD) Conditional Access policies, MFA configurations, and access control rules to align with internal and regulatory requirements (e.g., ISO 27001, GDPR).
• Conduct compliance audits and produce reports using Microsoft Compliance Manager and Secure Score , driving improvement initiatives across teams.
• Manage and maintain role-based access control (RBAC) and Privileged Identity Management (PIM) in Entra ID to minimize privilege escalation risks.
• Collaborate with the Head of IT and Head of Information Security to investigate, document, and remediate security incidents or non-compliance findings.
• Support external and internal audits by providing configuration documentation, access records, and system evidence.
• Evaluate and monitor the cybersecurity posture of vendors and partners. Ensure contractual and operational controls are in place.

Cloud & Identity Administration :

Endpoint Management & Infrastructure :

Network & Security Tools :

Projects & Documentation :

User Support and Service Desk :

Required Skills & Experience

Must-Have Technical Expertise :

Fundamental IT Skills :

Soft Skills :

Preferred Qualifications

Employment with RedCompass Labs includes the following competitive benefits package :

RedCompass Labs is committed to promoting and supporting a diverse and inclusive workplace, ensuring fair and equitable treatment for all. This fuels innovation and enables us to work better together with each other and for our clients

Skills Required

Gdpr, Cloud Security, endpoint protection , Powershell, Bash, Dns, Windows, Identity And Access Management, Firewalls, Microsoft Intune, Dhcp, Iso 27001, Vpn, Macos, conditional access